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*7h7-^tL< «±B* ±©5/'Xf - Ate 

St 

±!BW»r#8fc <fc 13 ±Ka-ifKffitf&a**; <y F 7- 
IX H:5/^-rAK»LT7:^-feXS#*%t>nfc4: 

■-ifBHeiiiMf a c. t*i#afc-r*a— »fB 

*y F7-^*>IX £±13*^ F7-?±<7»Xt l .Mc 

w ut 7 * -t *g#am>n;fcfrSfr £ wwf s 7 * -t 

±IB7 ^-bXlTOXx -y T^Ea-lfBSEtf &Bfc* 
•y h7-^t.b<ti^X7 : -AtC^Lr7^-tXS5t<*% 

[»#JS3] rf-bX-TSISKtta— *fBSE*fo&Eft 20 
*y F7-*t>lXti±8B*-y F7-?±©v'X7 1 Atc 

» l t 7 * -b xg#tffTfcnfcfr 5*pfc ww-r 5 7 * -b 

±127 * -b XfWrXr -y T^ffia-lfBtttf&gfc*; 
•y F7-^t> L<fi">X7 L AK»LT7^-b^a**HT 

t ^ 6 t,^t^%mt & ksejksw wf ^ x -y t* t > 

±EBaUS£ ! PJ»r*'r >y ^±323.— *f BSEtf * £J*& 
b T I ^ (/ ^ k fUWr * tt;fc*§£KU ±IBa— tfBK©«86 
%fi»|-rS3.— «Eig»Xr-y7fc£W^3;:k£& 30 

[I«>RJS4] ±I37^-bXW»iX^-y7°ti, fle>*v*> 
7**Xg##1tfeftfcfr5fr*W*"S» l o^T7 

±iem 1 <DXT-y7'T*±t3fl£fr^7?-bXg5j<tft7fr 
nfckW»fbfekt»c, *<D7^-teXg*# jjga— *f 
BHtfi&K* * <y F 7 - * & L < & X x -Mc #1" S 7 
* -b fcWif "T 33! 2 ©Xx >y 7° i: * S 

c i: %fif« k -T 311 2 $ fete 3 taB*©^.— WEE 

CM*® 5 ] 7 ^ -b Sfefc tia—»fBIiEtf &fi* 
*y F 7-^7 fe L < ti±K* -y h7-^±<0i/ l*K 

±137 * -fe x WBfr¥ liT-±tSn.— »fBSEtf * -y F 
7— ftU<{iS/XrAt*fbT7^-b^S#*^t>n 
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*-y F7-*fclXtt±'HB*-y h 7-^±^^7,7 L A(c 

*t lt7 * -t ^ss^fTfenfc^s^ifeipjw -r s 7 * ± 

±IE7 * -b x?JWr#)WP±l53.— if BEtf * -y F 
7-^fcU<«i/XxAfcttLT7^±Xg*A%*>ft 
fc £ WW $ ft fc*§£ s Bttc a- *f BIE*M& LTV§ 
ft^S^WW-r 3 KSEJ85W Wf ¥lu «fc ±EKffil« 
SW^|RT±8B3.— ffffiSE^S ^fiJci UT^ft^ kW 
Wtfnfc*&fc, ±I3a— •fBE©«ffiifefil!i , rsa- 
+f SSESi)¥l(S^ ^ ^ £ a - ^ {c^t* ■£ 3 46©a- 

[H*® 7 ] IS*JR 5 trdi 6 ©{sjn^ 1 JltcI3«c© 
&^J® ^ n y tf a - £ tc lit t ? 3 fc 46 O 7" a y 7 A * 
SBft L C k m £ ? % 3 > tf a - * K> siffift 
I3^^i*o 

[000 1] 

a. a— »fBtt©jE»2rtk 3.— mm.mm7v7-7 

A, IB^JSWcMb, *-y h7-^fcb<ttSK 
gfca-lfKiESS » 3 BRO-T > * 7 x -X WB&mfcM 
[0 0 0 2] 

4HO*7 h7-^^fiJfflLfc1«ffi'>X7 L A^Jj;<ffl^ 
— tfBESffi^i&S. 

[0 0 0 3] a— »fBaEfiffiOfiSW*t»®«» 

*<O/^X7-F*MBABSES/XxAtc«}:0fia^SnTE 
A±© S/^r- A^C07 ^ -b X^-P* 3 =t 9 K. % 2> t ©T 

[0 0 0 4] tCZtf, )fi^^Ct3^T^i/^ > y*>'^^5ffi 
ft^±U /<;w-F*BtrcfctilBrau«:*oT#T^ 
5. ZVtcib, /^7-F»t«tS3.— <fBSE"Ptt» fl&A 
J; 3^iE7 ^ * Rfatf 3 C k tt*^±^T 

I C * - F %5PJffl t fc a— tfffiSERtB t> ffl </ ^ ti 5 J: ^ 

[00 0 5] $P.(cajfiT-ti, 0&if*fl!o 
T{BA^iSS'J-r3, Ct>»$3/W^^ F 'J ^XlgUKffi 



-tmvwmiZfczv i c *-K«*B*tc»xL/Ti- 

f*AC«f-?^S^U iuttttf^y F7- 
? H'MDT ? -fe X£ffF oJf § <fc 5 (C b OTfe S<, 

[0006] El 4 a— *fSBKftfl5*affl Life* v. b 
.7-*'>*TA©»j£0J*3VrH"efc*o B^aVfS' 
Xfiftt, Sl,*2 OS* 10 1, 1 0 2 A* 

.^-Al06t^7h7-^1 10%^LTS 
^nrt^o A* • 36-^9--^ l 0 6(c«x-^^- 

xi 0 7««sa*nT*5»), a* • is-Stewr**^ 10 

[0"0 0 7] SJK »2<0«*1 0 1. 102tA»- 
^ l 0 6 fc©Hfc:W\ fflAISUSS 1 0 5#*K 
HSftTb^So fflAKSE*K 10 5B, t^-^-X 1 
0 7±<DT-**M2*A£ft/c'X fflAflfflWKSnfc 
O , T5i:^ofc^il5^*0jB'r^<. A* • 

[0 0 0 8] ^1<D5S*1 0 lfctt, 1C*-.K104 
£D*fflU-^*l 0 3AWtl§ 0 IC^-h*10 4tC 
Ji> A*-$p#-9--^i 0 6KWrS7^-bxfli*^-r 
5a— if KM* SBSEttflfi (a— ^Xr-^Xlffg, 

[0 0 0 9] ffi*, % 1 1 0 1 ©a— *ftf*v h 

7-* 1 1 OfcftLTA*- ^4-9—^1 0 6tc7^-b 
XtSJt£&, «TOJ:9*?WeiltTtTt^. * 30 
1\ S3 1 1 0 1 <DmW±.fcWfiZ nfca-+f ESIiE 
Hfrfflor-fn^- 9WJ«y*-r So ^bT, iB 
ffllcR^nS^/TNtc^oT I C*-F 1 0 4 fcWfflU 
-£"10 3K»AU @^(D^liE1ffS^^ 1 ©S* 1 0 

[0010] ^1 ©ffi* 1 0 Hi, gl^JRofclgfliEltfH 
fcfflA&SEStH 1 0 5 {C3MS„ fflAKBESH 1 0 5 tt, 
35 1 1 0 1 fr6Hi&*iTSfcBffi1fHB%B!KU 
lEbttntfA* • l 0 e^T^-feX^rl^ 

"f So A¥ • Ip^9— ^ 1 0 6'\©7?-bXtff ! FnJ£ft 40 
St. *<0<l t*> s m 1 Offi* 1 0 1 tc£;te>n, Hffi± 
fc^-yfe-v'fcbTS^ftSo 

[0 0 1 1] CO^yt-^ifea- IlOtt 
* 1 0 1 <OHiB±£a7K£ttfcA* ' t&%9"-'< 1 0 6 
<Diglf)ffl<737-f3y£^U-y?-fSo fSt, A* • &a 

sisa* • ^ i o 6*«Vf S9— e*fc£# 

[0 0 12] 

CSWAWSftLiofrSHH] ±iiOa— IfBSEStfi 50 
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^-SilfctcJ:^ *»y F7-*±fc««£;£nfcS'a 

±iEa*©RffiTti, a— WgtfJtfSv'XxA 
fc7^-t:X-f Style, a— 9 f |g|iE^Tffl©7-i'ny?:^ 
U v * LTSHWfca— «fKJiE<o«^«riSi!lf 

fcSo 

[0 0 13] Afa!<D'L>3it bT. feS^XrAi&fiJffl b 
,k5fc"fSfc#tt» ^©i/XxASrffigigSjbfcl^i:^ 

K.s©^ar**So t^tfoT, gwt-rs^x-rA 
*e»-r smite, #*©*jffl!Wfctt£<Hft©a^* 

» bft < Ttt Wtft V s f^©tfc»#fix a— »f {C tot 

[0 0 14] *£fflt±» iKOi^ftlHiliKStSfcfe 
£rS]±2 S tfT t S J: 5 tc-T S £ t * B to t i" 

So 

[00 l 5] 

■rAti, 7^-trX-rSfSfctia— ^IgiiE^Sa^-y h 
7 ^ -b xs**^r tofrltir&fr* WWf-T S WBf^S t , 

— ♦fSSBSft^ a t ^ £ £ ^ 1" s o 
[0 0 l 6] ^fc, *«WK±53.-1fKSE«)filft^rffi 
It, 7^-feX-rS^Jctia— *fBE^iMlft*'y h7- 
^feU<ti±!3**y F7-^±<D>'XxA{c*tLT7* 

■fe xfi^HTtonfc^SA^wWf-r s 7 * * x wixf 

>y 7fc , ±IE7 ^ -fe XWWXx <y 7°T'±IEa-+) !! |giiE^ 
<^ S a * >y h 7 - 9 b < (i f X -r A f c W b T 7 ^ -b X 
S**'ff t>tifc WW * nfc*-&K. ±E3.— *fBSE© 
«ffi*S»-T Sa— <fagSEfi»^-r <y % S C t 

[0 0 17] *mn<DWLV>WkT*&, 7^-tXf Sf^tC 
tin.— «fffiSE*^SSa*'y h7-^ t> b< &±ie*-y b 
7-^7±cD~>X-f Atc^bT7^-feXg**%t>n/£^ 
S3b^WK-rS7^-trX|iJ8lTXx'y7°i:, ±127 *-feX 
f iJ»rXr -y 7 , -e±Ka--«re8EjP ( fcg&* y h 7-* *> 
b <tt ->Xf Heft bT 7 ^ -tr Xg*A%tonf; tWW 

$ nfctf^tc . mz a.—wm.Wf&iL br s 
w »f f s kiejssw ^ -y 7° t . tmmfc^n w x 

r -y T'T-ilHa— if Igffi^ * /c^il b T 1/ ^ ^ t ¥iJH9r $ 
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[0 0 18] *%m<DZ<Dl!l<DffllrVlit* ±IE7*-fe* 
*»JBr*r -y ft 6*07 *-fe XEjRjWt taftfcrtPS 
^WfTSaiO^fy^k, ±IES8 1 <D7>7-y'7~£ 
±|Bfsf P> fr£>7 * -fe XSsRtffTbtlfc fcWtt L ft £ € 

7 - * «> l < a f- i*\c *t-r s 7 * -b zs^^s*^ 

[0 0 19] Sfc, !fKSEjSS!iyn^5A 

^feb<«±ge^-y h7-^±©J/^rAK*tUT7^ 1C 
■fe XSSffiton/cW^^Wt §7 *-fe*fflWi# 
Ill, fc<fctf±fE7 ^ -b^ipJWf¥)(HT±BBa— ifBIE^ies 
h7— *fcL<ttJ'X7 l i»fc:WLT7*-feXB 
#tf frfciafc WW* ftfc»&fc:* ±Ea— *fBIiE®« 

[0 0 2 0] *«W<Dfl!l<D!&»tt» 7*-fcXl- SIRfctt 
a— if' KKtf&BJB: * -y h 7 - * *> L < £±82* ^ b 7 
- 1 ±<D */ X -r A £ ft L T 7 * -b *£#tffT t> fttz fr§ 
frttMt&TZ-kXVM^m* ±IE7^-bXfiJ8ff^ll 2( 
T±ISa-+f|W!ig.5^* >y h 7-* fe L < li->Xf 
A LT 7 * -tr 7sE#tfifrt>tirc £ WW* nfcil£ 

SEJSSPJWr* * «t ±IESMS WW* STiE^ 
— <fffili^S L.tVfci^ £ «Wr£ JafcJfr&fc, ± 

[00 2 1 ] Sfc, #8H©3>ea-*ffi#JRt>nJfi£ 

&ffilS!Sft{i, fit** 5 $fct± 6 ©Mn*> 1 JSKffiWO 

[0 0 2 2] 

■ciiwoiijii©}gjfi] wt, *%m<o-$m&t&*fm 

lcM-3^?m.W?%o Bl^ #Hfifi»IBfc.fc5:3.— »f 

7 - ? is * 7- J*-kft<Dfllt£.%7iit @T*& §„ 
[00 2 3] 02fc:te^T, 1, 2, 3tt>V-V-*Vl/3 

l ltiA* i2li«S < 

[0 0 2 4] 7ri'M-^9li 7 7-OUDi55M, H'J 
10t±» 48* 1. 2. 3fre»<Dg#fcg^TW?;*- 

2, 36^©KK^*ofci:*K?i*as[Ufct)'r5saa 
tcBB-rses^ftfflffl^fTOo «a • jaifctf-'* 1 2 a, 
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cn&©#H-9--/*9~i 2ti&»]©t»<D*ffii^5c4: 

[0 0 2 5] 8tt;l/-*-C&t), *>yF7-?2 0±© 

■y h7~* 2 0±K&{I2ftfc7 ; -2«:, &-f;l/-* 8 

;l/-*8ti, I Pa 7 ^i:$5^ I P7 KbX^rfei: 
;l/-^8g#^oSSS1f$S r-f>^r-7* 

[0 0 2 6] 1.3ttfflAKIESin»*t), Sl~S3© 
4S*l~3i:, A*-i^4-9--^l lfe«ttfSa-W8 
■9--/S1 2fc©BKR«$tiT^S 0 -(aAigaE^Kl 3 

a* • ^ 1 1 > Ma ■ w^-y---^ 1 2 tc*t 

■T S 7 ^ -fe X%^tDa— iftCtt LTO^BFRl-r * 

[0 0 2 7] ^l<DiS*lfcti, lC*-F50*ffl'J 
^#■9— Ml ifc»tS7^-tXfll**'r5a-1f»cii 

&£<D>u*mmm *««lti5<. ^i<djs*icd 

SK7^-feX-r«cfc*^*Sfci:t»»c, 1CA-K5 
%ffl^T3.-ifffiSE*Stt5Jli:"P, A* ^ 
1 nct7^-b^T*^5«k9(c*S 0 
[0 0 2 8] Sfc, m2 0ffl*2tct±, IC*-F7«D 

ma • rat-Ai 2tttf ^^-txii^irf 3:1- 
■*ffcl8T*KffiW« (a— IfO^f— ^ xiftfs, 
atgRft HO/ W «rtS«LT*3<o m2 0iS 

fctiSt7^-bXl-Siifcjyi?*Si:i:t>K:, IC* 
— K7 ^l^ta-' f KliE*SWS C «9 • mm 

[ 0 0 2 9 ] m 3 3 «, a— *fS8SE*St* Sfc* 

•Iftt, A* • *6#-9—>< 1 1 fe«ktfi&S • 1 
2tcW1-§7^-trX«l^ltoTfc'P)-r\ 7 7-fM-^ 
9W-M-^l 0{c^LTO*7^-tr7.1"5Ci:^ 

[0030] cc-ettSi*«fct;a2a)JiB3Ki. 
ttsm/fifcuttf, »i feet u'^ 2«i, 2g#* 1 

5, 7«rffli"»T^Sj!)^ *«Wt±3.— <fKSE©*ffitt^ 
50 ffi&tfifcffl^TfcfiVNi 
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[0 0 3 1] CCTtt, Tf-bX-TSOfCa— »f 

ffiffi*&g A* • te^tf-'* 1 l 33<fctf» 
a • BHKtf— ^ 1 2 tLTct>\ ctit><Dy—/^cmig.z 

C^r-OW— ^9-^><— >U o, SfcttS^ 
fil 3lcJ:?.a— ^BfI£7^X©Buil&ftt-f 
[0 0 3 2] mi^tfti-y^miit, H2tfK^Lfc 

'sjaa^frd. 2 2{iigiiMagi5'r-$> , 3, fflAtstigfi 
i 3 tnmLx=L— ymwimtz^mzftoo 

[0 0 3 3] ±iBS8iO&3» 2 2 ti, U - ¥ 4 fCT 
mm,-3 tc I C A— F 5 rtOKBEtiHH&Bl?) JlfH 
g|S2 lfcfl-LTflA&SESBl Sfc&te-fSflMtfcSL 
T^5. Sfc 1AIISI1 3rt*£5H3»2 l£/rL 

fcWUT^So lf«aSP2 2^ISIiEfFBl1f$g^lf b 

ti^Fi^i a* • te%9— 1 1 tcT^-t^-rac 

[0 0 3 4] 2 3{47*-fe*S#S5T?fcD, 
7-<;l/+>---A9, 1 0*3«fcO*A* • 

7$>(D-?hZ> c HftW{Cf4, 7^-feXg5t<g)5 2 3ti\ 35 
1 ©a$3fc 1 CDHffi±(cS^$ni> G U I (Graphical Us 
er Interface) {c<t SSiljffl7^ a yfc^tJ. a— «W 

^M-^g, ^-M-^l 0 Hi A* • So-^tf 

[oo3s] ft*, cn&otf-^g. io, lice 

ti*^o 0>J*.{4\ ^-a-^-^e»^-y^7-v^*5^ 

tioT, S*-'<9, 10, 1 1 KfcfTSTi'-trXfc 

i$?t4, &-9--^9, 10, 1 1 cofilJj^ffitef^cEg^ 

[0 0 3 6] 2 4«a— •fKSEiE»»T?*t), 7^-feX 
S*a5 2 3 tcJ:t)A*'ie4-9--^l 1 fcttfS7*-t: 

0, UfflU — 2*4CQ#— KX0 7 hie I C#— F5£Jf 
ti, 1 C*-F4%#ffl'J-^5H:iSAU S#©ffiSE 

i»fn*s i os$* i fcK*«?»«T3.— «fffiaE%^tT"r 

^[0 0 3 7] C iOn.— +p-HgfI«a»JgP 2 4 14, ' 
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So HIKfctt£l©SS*l©CPU*3WiMPlK R 
AM, ROMfcifTMIMcStU RAM-^ROMfClBttS 

ntzfu yjkwwtfpt s c t »c «t o T±iB l rc=L—*f 

[0 0 3 8] LfctfoT, % 1 1 flUJEa— »J*H 

KS»jg|5 2 4 o««%*fc"r £ 7 KftttStf* 7n 
A*WAtfCD-ROM©ot3fcSBS»H*KESU 3 

cD-ROMwwfc, 7a'vtr- (ssft&o f-rx 

f^X^ DVD, ^WMfc^y^-F^fcffli/^C 
& /r L, T fill O 3 > tT a - * *» 6 2* ^ n - F t Z> <fc 5 fc 

[0039] m 1 OS* 1 «?nfcyn^7 
AfcUff-f * c i: «t •) ^--1fKSEEii» 2 4 

20 feSVH±ffic07y i J^-^ayy7 F^FtttlRlL-T 

ojaao^Tfesi^i— »^ i oi$* i cD^Hgffi?i4-" 

[00 4 0] H 3 14, 3.— «f BSESKiaP 2 4 <Dmit%7Ts 

»)g|52 4(i, 7^-bXg*^2 3tC<fc»?7^-bXS^ 
fft>n/fc*^if5^«:EffiLTt^5 (XT7 7S 1 ) . M 

Uf-y^S 2) o 

[00 4 1] A* • 1 Id P7 

FUXi:7^-tXg5}<^7fen/c 1 P7 KUXfctf-a 

.,^•9--/^ i i eft-f sfcOT?***^*^**]^*- 
S 0 a— tfBSE^Bfc-TSA^-J&^-^l 1©I 

[0 0 4 2] A* •^•9—^1 1 (c3trS7£-trXlf 
*T'^^iI^, -Tftte^, 7r-r^-9--^9t3J;t>*^- 
/l/+r-Mi 0AO7 ^-feXg^-e^ofc^^, a— 9 s 

•9 s ISIiEtcMLTt4|si65aa^f7 9ii<!:^<Xx-y7 p S 1 

^ 9 & 3 1 H4 ^ / S 1 0 <0*ftl*^tT* tiS C ^ 

[0 0 4 3] -7?, \m ■ ^ 1 1 fctt-f 57* 
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[0 0 4 4] a-lfBfiEOJSSOfySffffcStf:, c 

35 2 1 JgrftUTflAKSESB 1 3fca— ifEliEOJSS* 

SB 1 3 AMItoJIt^^-r & C t fcfcS, 
[0 0 4 5] ttffi&tBrcit, m 1 ®«B* 1 ©Hffi± 10 

£<D7'(=iy%9Vv9t&Z tiaota- £B 
K®«M&&*iaWteSf!rr s c ^ fc RJ86ft.fc 9 iz 
5o LfttfoT, A» • 1 l£*JLT7*-fe 

XT-'y-fS 1 (cM^o 

[0 0 4 6] -2k a-^SEtf f^JSabT^ft^lS 
£ (a— ifBBEffla^S^fiftetiTi/^ft^Ji^) »±, 18 
mtm® 2 2 (c «k •) a— if KffiE%R 5 fe*<0««* e» 20 

^ l ©iSS* l <DHS±lcS^ttS}a^ti:fl£oT 1 
C ii— F 4 'J - 2" 5 tcffi A L , S ftOBSEHMH* 

[0 0 4 7] CC-Cfi, SlOW^lfcfc^TA 

* t s a-fiieis 2 4 (omfttt* btct)\ m 

Eig»)g|52 4 tC<fcoT|oHt«ffia*^Tt>n§„ 30 
[0 0 4 8] JU±8¥L<8HBl/fc *!M$«gfC 

2 -fe 7. bfc i: * fc, 3.— *f BSE7n ^ A?: g®) 
[0049] :niao, a— fti, ^^Jft 

*> s'toS'KKttffi^eii-r s £ -s u s ^ & was 

y£ iS*U'y*-fttfcfa<, *fl8M(Dfziblct>m 40 

mo^'J -v^JSi / Ft : S(^-9--^'\^7^-t:7.fesg|iE^ 
flDiBS&fcfr 5 :i-tf<D»ft 3 JMa*Wtefc'*' 

[0 0 5 0] S/fc, #ftBBBffiTHu a— ffgffitf&S 
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[00 5 1] JJLhtliWUfcliaSJgtStix 
[0 0 5 2] 

A(c^UT7^-bXg5t<^ : f^nfc^S^W»Tb. * 
co ± ? * 7 * -b xfi#tfft toftfc t £ tia— ffBSSEO 

5 tfitc fc s"t> ^rssE«in%iei!i-r sfcv^<st>L«*^ 

TO^n, Sfc, l@©jtf^T-SWC0:/XxA^'\cr)7 
^•bXt,BSE«ttl<oei(it)!f9Cfc^t?$, a— If©* 

«Wte«ktitf , a— if Igll^ft^ ^■—9 1 'OfiJ{Stt*[S]± 

[HfficDffim&l^] 

[0 1 ] *HJSJB«t:: J: 5^ 1 ©tt*0)«fliflWMH**P 
[0 2] *HMBK8IKJ:S3L— •fSBffi'>X7 L A%)8fflt 
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(54) USER AUTHENTICATION SYSTEM, USER AUTHENTICATION 
STARTING METHOD, USER AUTHENTICATION PROGRAM AND STORAGE 
MEDIUM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To improve convenience of a user for whom a user 
authentication is executed by eliminating a need for the user to start an 
authentication function intentionally. 

SOLUTION: A user authentication starting part 24 is provided to a terminal 1 on 
a network 20, which, in accessing, judges whether a request for an access is 
made to a network or a system needing a user authentication. When the request 
for the access is made, the user authentication function is started automatically, 
thereby eliminating the user's need to start the authentication function 
intentionally. 
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CLAIMS 



[Claim(s)] 

[Claim 1] The user authentication system characterized by having a decision 
means to judge whether the access request was performed to the system on the 
network which needs user authentication, or the above-mentioned network in 
case it accesses, and a user authentication starting means to start the function 
of the above-mentioned user authentication when it is judged that the access 
request was performed by the above-mentioned decision means to the network 
or system which needs the above-mentioned user authentication. 
[Claim 2] The starting approach of the user authentication characterized by to 
have the access decision step which judges whether the access request was 
performed to the system on the network which needs user authentication in case 
it accesses, or the above-mentioned network, and the user-authentication 
starting ^st^p which starts the function of the above-mentioned user 
authentication when it is judged that the access request was performed to the 
network or the system which needs the above-mentioned user authentication at 
the above-mentioned access decision step. 

[Claim 3] The access decision step which judges whether the access request 
was performed to the system on the network which needs user authentication in 
case it accesses, or the above-mentioned network, The authentication 
success-or-failure decision step which judges whether user authentication is 



already materialized when it is judged that the access request was performed to 
the network or system which needs the above-mentioned user authentication at 
the above-mentioned access decision step, The starting approach of the user 
authentication characterized by having the user authentication starting step 
which starts the function of the above-mentioned user authentication when it is 
judged that the above-mentioned user authentication is not materialized yet at 
the above-mentioned authentication success-or-failure decision step. 
[Claim 4] the 1st step, as for the above-mentioned access decision step, a 
certain access request judges it to be whether it was carried out or not, and the 
1st step of the above - the above -- the starting approach of user authentication 
according to claim 2 or 3 that the access request is characterized by having the 
2nd step which judges whether it is an access request to the network or system 
which needs the above-mentioned user authentication when it judges that the 
access request of some kind was performed. 

[Claim 5] The user authentication bootstrap for making a computer perform the 
user authentication activation procedure which starts the function of the 
above-mentioned user authentication, when accessing and it is judged that the 
access request was performed by the access decision procedure of judging 
whether the access request having been performed to the system on the 
network which needs user authentication, or the above-mentioned network, and 



the above-mentioned access decision procedure, to the network or system 
which needs the above-mentioned user authentication. 

[Claim 6] The access decision procedure of judging whether the access request 
having been performed to the system on the network which needs user 
authentication in case it accesses, or the above-mentioned network, When it is 
judged that the access request was performed by the above-mentioned access 
decision procedure to the network or system which needs the above-mentioned 
user authentication The authentication success-or-failure decision procedure of 
judging whether user authentication already being materialized, And the user 
authentication bootstrap for making a computer perform the user authentication 
activation procedure which starts the function of the above-mentioned user 
authentication, when it is judged that the above-mentioned user authentication is 
not materialized yet in the above-mentioned authentication success-or-failure 
decision procedure. 

[Claim 7] The record medium which is characterized by recording the program 
for making a computer perform each procedure of a publication on any 1 term of 
claims 5 or 6 and in which computer reading is possible. 



DETAILED DESCRIPTION 

[Detailed Description of the Invention] 
[0001] 

[Field of the invention] This invention relates to amelioration of the interface at 
the time of receiving user authentication required accessing to the system on a 
network or the netwo* concerned especially about a user authentication system, 
the starting approach of user authentication, a user authentication bootstrap, 

and a record medium. 

[0002] 

(Description of the Prior Art, In recent years, the information system using 
networks, such as the Interne, and intranet, is used widely. In this information 
system, it has been an important technical problem how the unauthorized entry 
by others, an information leak, an alteration, operation active jamming of the 
information system itself, etc. are prevented. Although some techniques exist as 
a security system for keeping the insurance of an information system, a user 
authentication technique is in one of them. 

[0003, The typical thing of a user authentication technique is a password. That is. 
each user enters from a keyboard etc. the password of a proper assigned to 
itseif. and if the password is collated by the personal authentication system and 



the right thing is confirmed, it comes to be able to perform access to the system 
on a network or the system concerned. 

[0004] However, a hacking technique improves in recent years and it is 
becoming easy to steal a password. Therefore, in user authentication with a 
password, .it is a situation impossible as a matter of fact to prevent unlawful 
access by others completely. So, recently, the user authentication technique 
with which decode used the difficult IC card is also used increasingly. 
[0005] Furthermore, recently, the so-called biometric-person-authentication 
technique of identifying an individual using a fingerprint, voice, a face, etc. 
attracts attention, and is developed. Moreover, the technique which combined 
this and an IC card is also developed, for example, a user's fingerprint data -- an 
IC card - storing - network utilization time -- the IC card - a terminal -- inserting 
- a user - his fingerprint data are collated, and if right, access to a network etc. 
will be permitted. 

[0006] Drawing 4 is drawing showing the example of a configuration of the 
network system which applied the user authentication technique. In the system 
shown in drawing 4 , the 1st and 2nd terminal 101,102, and personnel affairs 
and a salary server 106 are connected through the network 110. The database 
107 is connected to personnel affairs and the salary server 106, and the various 
data about personnel affairs and a salary are stored. In these various data, the 



individual humanity news about individual school education, punishment, clinical 
recording, health condition, salary, etc. is also contained. 

[0007] Personal authentication equipment 105 is installed between the 1st and 
2nd terminal 101,102, and personnel affairs and a salary server 106. That it 
should avoid un-arranging [ that the data on a database 107 are altered or 
individual humanity news is stolen ], personal authentication equipment 105 
performs processing about user authentication, in order to permit access to 
personnel affairs and the salary server 106 only to a specific user. 
[0008] The exclusive reader 103 of IC card 104 is connected to the 1st terminal 
101. The authentication information (biometrics information, such as a user's 
status information, or a fingerprint, voice, a face, etc.) about the user who has an 
access privilege to personnel affairs and the salary server 106 is stored in IC 
card 104. 

[0009] When the user of the 1st terminal 101 accessed personnel affairs and the 
salary server 106 through a network 110 conventionally, it was performing in the 
following procedures. First, a user clicks on the icon for user authentication 
activation displayed on the screen of the 1st terminal 101. And IC card 104 is 
inserted in the exclusive reader 103 according to the directions displayed on a 
screen, and the 1st terminal 101 is made to read one's authentication 
information. 



[0010] The 1st terminal 101 sends the read authentication information to 
personal authentication equipment 105. Personal authentication equipment 105 
checks the authentication information sent from the 1st terminal 101, and if right, 
it will permit access to personnel affairs and the salary server 106. If access to 
personnel affairs and the salary server 106 is permitted, that will be told to the 
1st terminal 101 and will be displayed as a message on a screen. 
[001 1] The user who looked at this message clicks on the icon for starting of the 
personnel affairs and the salary server 106 displayed on the screen of the 1st 
terminal 101. Then, the initial screen which personnel affairs and the salary 
server 106 offer starts, and it becomes possible to receive the service which 
personnel affairs and the salary server 106 concerned offer henceforth. 
[0012] 

[Problem(s) to be Solved by the Invention] By using an above-mentioned user 
authentication technique, it is possible to raise the safety of the system 
connected on the network. However, before a user accesses the target system, 
it is necessary to click on the icon for user authentication activation, and to start 
the function of user authentication intentionally in the above-mentioned Prior art. 
[0013] As human being's psychology, when it is going to use a certain system, 
usually it is thought that he wants to start the system directly. Therefore, before 
starting the target system, in order to do the excessive activity which is 



completely unrelated, the conventional structure which must start the function of 

user authentication specially was very troublesome [ the original use purpose ] 

for the user. Moreover, the actuation was also very troublesome, in order to have 

to click on an icon repeatedly and to have to start the function of user 

authentication, and the function of the purpose system each time. 

[0014] This invention is accomplished in order to solve such a problem, it 

abolishes the need that a user starts an authentication function intentionally, and 

aims at enabling it to raise the convenience of the user who performs user 

authentication. 

[0015] 

[Means for Solving the Problem] The user authentication system of this invention 
is characterized by having a decision means to judge whether the access 
request was performed to the system on the network which needs user 
authentication, or the above-mentioned network in case it accesses, and a user 
authentication starting means to start the function of the above-mentioned user 
authentication when it is judged that the access request was performed by the 
above-mentioned decision means to the network or system which needs the 
above-mentioned user authentication. 

[0016] Moreover, in case the starting approach of the user authentication by this 
invention accesses, it carries out having the access decision step which judges 



whether the access request was performed to the system on ,he network which 
needs user authentication, or the above-mentioned network, and the 
user-authentication starting step which start the function of the above-mentioned 
user authentication when it is judged that the access request was performed to 
the network or the system which needs the above-mentioned user authentication 
at the above-mentioned access decision step as the description. 
,0017) The access decision step which judges whether the access request was 
performed to the system on the network which needs user authentication in 
other modes of this invention in case it accesses, or the above-mentioned 
network. The authentication success-or-fai,ure decision step which judges 
whether user authentication is aiready materialized when i, is judged that the 
access request was performed to the network or system which needs the 
above-mentioned user authentication a, the above-mentioned access decision 
step,. When i, is judged tha, the above-mentioned user authentication is no, 
materiaiized ye, a, ,he above-mentioned au,hen,ica,ion success-or-,ai,ure 
decision s,ep, i, is characterized by having ,he user authentication starting step 
which starts the function of the above-mentioned user authentication. 
,0018, the 1s, step, as for the above-mentioned access decision step, a certain 
access request judges it to be whether it was carried ou, or not in the mode of 
others o, this invention, and the 1st step o, the above - the above - when it 



judges that the access request of some kind was performed, the access request 
is characterized by having the 2nd step the above-mentioned user 
authentication judges it to be whether it is an access request to a required 
network or a required system. 

[0019] Moreover, when the user-authentication bootstrap of this invention 
accesses and it is judged that the access request was performed by the access 
decision procedure judge whether the access request was performed to the 
system on the network which needs user authentication, or the above-mentioned 
network, and the above-mentioned access decision procedure, to the network or 
system which needs the above-mentioned user authentication, it is for making a 
computer perform the user-authentication activation procedure which starts the 
function of the above-mentioned user authentication. 

[0020] The access decision procedure of judging whether the access request 
having been performed to the system on the network which needs user 
authentication in case other modes of this invention access, or the 
above-mentioned network, When it is judged that the access request was 
performed by the above-mentioned access decision procedure to the network or 
system which needs the above-mentioned user authentication When it is judged 
that the above-mentioned user authentication is not materialized yet in the 
authentication success-or-failure decision procedure of judging whether user 



authentication already being materialized, and the above-mentioned 
authentication success-or-failure decision procedure, it is for making a computer 
perform the user authentication activation procedure which starts the function of 
the above-mentioned user authentication. 

[0021] Moreover, the record medium which can computer read this invention is 
characterized by recording the program for making a computer perform each 
procedure of a publication on any 1 term of claims 5 or 6. 
[0022] 

[Embodiment of the Invention] Hereafter, 1 operation gestalt of this invention is 
explained based on a drawing. Drawing 1 is the block diagram showing the 
functional configuration of the user authentication system by this operation 
gestalt, and drawing 2 is drawing showing the configuration of the whole network 
system which applied the user authentication system of this operation gestalt. 
[0023] In drawing 2 , personnel affairs and a salary server, and 12 are connected 
so that a file server and 10 may be accounting and a financial server a mail 
server and 11 and, as for the terminal with which 1, 2, and 3 consist of a 
personal computer etc., and 9, these can communicate mutually through a 
network 20. 

[0024] A file server 9 processes transfer of a file, deletion, directory actuation, 
etc. A mail server 10 performs processing handed over when the electronic mail 

P 



was transmitted, or the delivered electronic mail is kept and there is enquiry from 
terminals 1,2, and 3 based on the demand from terminals 1,2, and 3. Personnel 
affairs and the salary server 1 1 perform various processings about the personnel 
affairs and the salary in a company. Accounting and the financial server 12 
perform various processings about the accounting and financial affairs in a 
company. In addition, since these various servers 9-12 can use a well-known 
thing, detailed explanation of the contents of processing is omitted here. 
[0025] 8 is a router and is installed in the suitable location on a network 20. The 
data transmitted on the network 20 from a certain computer are surely sent to 
the target computer via a router 8. This router 8 judges the following node to 
transmit based on the destination IP address in IP header with reference to the 
path information (routing table) which router 8 self has, and transmits data. 
[0026] 1 3 is personal authentication equipment and is installed between the 1 st - 
the 3rd terminal 1-3, and personnel affairs, the salary server 11 and accounting 
and a financial server 12. Personal authentication equipment 13 performs 
processing about user authentication based on the authentication information 
sent from the 1st and 2nd terminals 1 and 2, in order to permit access to 
personnel affairs and the salary server 1 1 , and accounting and a financial server 
12 only to a specific user. 

[0027] The exclusive reader 4 of IC card 5 is connected to the 1st terminal 1 . The 



authentication information (biotechnology information, such as a user's status 
information or a fingerprint etc.) about the user who has an access privilege to 
personnel affairs and the salary server 1 1 is stored in IC card 5. The user of the 
1st terminal 1 can also access personnel affairs and the salary server 11 by 
receiving user authentication using IC card 5 while being able to access a file 
server 9 and a mail server 10 freely. 

[0028] Moreover, the exclusive reader 6 of IC card 7 is connected to the 2nd 
terminal 2. The authentication information (biotechnology information, such as a 
user's status information or a fingerprint etc.) about the user who has an access 
privilege to accounting and the financial server 12 is stored in IC card 7. The 
user of the 2nd terminal 2 can also access accounting and the financial server 
12 by receiving user authentication using IC card 7 while being able to access a 
file server 9 and a mail server 10 freely. 

[0029] The 3rd terminal 3 is not equipped with the function for receiving user 
authentication. That is, it does not have an access privilege to personnel affairs, 
the salary server 11, and accounting and a financial server 12, but the user of 
the 3rd terminal 3 can be accessed only to a file server 9 and a mail server 10. 
[0030] In addition, although considered as the configuration which forms the 
exclusive readers 4 and 6 of IC cards 5 and 7 by external [ of the 1st and 2nd 
terminals 1 and 2 ] here, the 1st and 2nd terminals 1 and 2 the very thing may be 



equipped with the reading function of IC cards 5 and 7. Moreover, although IC 
cards 5 and 7 are used in order to receive user authentication here, this 
invention does not limit especially the approach of user authentication. For 
example, other user authentication techniques, such as a password, may be 
used. 

[0031] Moreover, although what needs user authentication for accessing was 
made into personnel affairs, the salary server 11, and accounting and a financial 
server 12, it is not limited to these servers here. For example, it may be made to 
consider as the prerequisite of access to the user authentication by personal 
authentication equipment 13 also with other servers or file servers 9 which are 
not illustrated, a mail server 10, or the host computer which is not illustrated. 
[0032] The block diagram shown in drawing 1 shows the example of a functional 
configuration of the 1st terminal 1 shown in drawing 2 . In addition, since it is 
constituted like [ the 2nd terminal 2 ] the 1st terminal 1, illustration is omitted 
here. In drawing 1 , 21 is the communications department and performs 
processing about transmission and reception of data through a network 20. 22 is 
the authentication processing section, moves together with personal 
authentication equipment 13, and performs processing about user authentication. 
[0033] The above-mentioned authentication processing section 22 incorporates 
the authentication information in IC card 5 read by the exclusive reader 4, and 



has the function transmitted to personal authentication equipment 13 through the 
communications department 21. Moreover, the authentication authorization 
information sent through the communications department 21 from personal 
authentication equipment 13 is incorporated, and it also has the function to hold. 
Only while the authentication processing section 22 holds authentication 
authorization information, it is possible to access personnel affairs and the salary 
server 11. 

[0034] 23 is the access request section and processing for a user to demand to 
access at a file server 9, a mail server 10, and personnel affairs and a salary 
serV er 11 is performed. Specifically, the access request section 23 contains the 
icon for starting by GUI (Graphical User Interface) displayed on the screen of the 
1st terminal 1. When a user clicks on this icon with a mouse, access to a file 
server 9, a mail server 10, or personnel affairs and a salary server 11 is required. 
[0035] In addition, the starting approach of these servers 9, 10, and 11 is not 
restricted to the starting approach which used the icon. For example, it cannot 
be overemphasized by choosing from a menu bar the menu for starting by which 
pop up or a pulldown indication is given that you may make it require access to 
each servers 9, 10, and 11. In this invention, especially the starting approach of 
each servers 9, 10, and 1 1 is the unlimited meaning. 

[0036] 24 is the user authentication starting section, and when the access 



request to personnel affairs and the salary server 11 is performed by the access 
request section 23, it starts automatically a function for the authentication 
processing section 22 to perform user authentication. This requires a user to 
insert IC card 5 in the card slot of the exclusive reader 4. According to this, a 
user inserts IC card 4 in the exclusive reader 5, makes the 1st terminal 1 read 
one's authentication information, and performs user authentication. 
[0037] This user authentication starting section 24 is equivalent to the decision 
means and user authentication starting means of this invention. It consists of a 
CPU of the 1st terminal 1, MPU, RAM, ROM, etc. in fact, and the functional 
configuration of the user authentication starting section 24 mentioned above 
when the program memorized by RAM and ROM operated is realized. 
[0038] Therefore, the program operated so that the 1st terminal 1 may achieve 
the function of the above-mentioned user authentication startup section 24 is 
recorded on a record medium like CD-ROM, and it can realize by making it read 
into a computer. As a record medium which records the above-mentioned 
program, a floppy (trademark) disk, a hard disk, a magnetic tape, an optical disk, 
a magneto-optic disk, DVD, a non-volatile memory card, etc. can be used in 
addition to CD-ROM. Moreover, you may make it download the 
above-mentioned program from other computers through a network 20. 
[0039] moreover, the function of the user authentication starting section 24 is not 



only realized by performing the program to which the 1st terminal 1 was supplied, 
but The case where an above-mentioned function is realized in collaboration 
with OS (operating system) or other application software etc. with which the 
program is working in' the 1st terminal 1, Also when all or a part of supplied 
processing of a program is performed by the 1st functional add-in board and 
functional expansion unit of a terminal 1 and an above-mentioned function is 
realized, this program is included in the operation gestalt of this invention. 
[0040] Drawing 3 is a flow chart which shows actuation of the user authentication 
starting section 24. In drawing 3 , the user authentication starting section 24 is 
supervising whether the access request was performed by the access request 
section 23 (step S1). When a certain access request is performed, it judges 
whether it is an access request to personnel affairs and the salary server 11 
(step S2). 

[0041] Here, an access request judges whether it is a thing to personnel affairs 
and the salary server 1 1 by obtaining whether the IP address of personnel affairs 
and the salary server 11 and the IP address to which the access request was 
carried out are in agreement. What is necessary is just to specify beforehand the 
IP address of personnel affairs and the salary server 11 which needs user 
authentication. 

[0042] Since it can access freely, without performing user authentication when it 



is not an access request to personnel affairs and the salary server 1 1 (i.e., when 
it is an access request to a file server 9 and a mail server 10), it returns to step 
S1, without processing in any way about user authentication. In this case, the 
function of the file server 9 or mail server 10 by which the access request was 
carried out will be performed (not shown). 

[0043] On the other hand, when it is an access request to personnel affairs and 
the salary server 11, user authentication is already performed and judges 
whether it is finishing [ formation ] (step S3). Whether user authentication is 
already materialized can judge by seeing whether authentication authorization 
information is held by the authentication processing section 22. 
[0044] In addition, the decision approach of the success or failure of user 
authentication is not limited to this example. For example, when the access 
request to personnel affairs and the salary server 11 is performed, you may 
make it ask personal authentication equipment 13 the success or failure of user 
authentication through the communications department 21. In this case, 
personal authentication equipment 13 will hold authentication authorization 
information. 

[0045] With this operation gestalt, the icon for user authentication activation is 
also displayed as usual on the screen of the 1st terminal 1, by clicking on this 
icon, it is also possible to start the function of user authentication intentionally, 



and it is made. Therefore, when an access request is performed to personnel 
affairs and the salary server 11, user authentication may already be formation 
ending. When user authentication is already materialized, it returns to step S1. 
[0046] On the other hand, when user authentication is not materialized yet, a 
function for the authentication processing section 22 to perform user 
authentication is started automatically (step S4). (when user authentication 
processing is not performed yet) According to this, a user inserts IC card 4 in the 
exclusive reader 5 according to the directions displayed on the screen of the 1st 
terminal 1, makes the 1st terminal 1 read one's authentication information, and 
performs user authentication. 

[0047] In addition, although here showed actuation of the user authentication 
starting section 24 when the access request to personnel affairs and the salary 
server 11 is performed in the 1st terminal 1, same processing is performed by 
the user authentication starting section 24 within the 2nd terminal 2 also when 
the access request to accounting and the financial server 12 is performed in the 
2nd terminal 2. 

[0048] Since he is trying to start a user authentication program automatically 
when access to the server of the assignment which needs user authentication 
occurs in this operation gestalt, as explained in detail above, it can be managed 
by him even if a user does not start an authentication function intentionally. 



[0049] Thereby, what is necessary is just coming to operate it along with one's 
purpose, and it is wide opened from the troublesomeness of starting an 
authentication function specially. [ whether a user wants what to do from now 
on ] in order to access the target server, it becomes unnecessary moreover, to 
click on an icon independently also because of user authentication that what is 
necessary is just to click on an icon once. Therefore, access to the purpose 
server can also perform starting of an authentication function by one click 
actuation, and a user's actuation procedure can be made simple. 
[0050] Moreover, when user authentication accesses the server of required 
assignment and user authentication can already be managed with this operation 
gestalt, a user authentication function is not started again. That is, it can avoid 
performing unnecessa^ auto-boo. of a user authentication function according to 
this operation gestalt. 

[0051] in addition, it does not pass over the operation gestalt explained above to 
what showed an example of the somatization which hits caring out this 
invention, and the technical range of this invention must no. be restnctively 

interpreted by this. That is. this invention can be carried out in various forms, 

without deviating from the pneuma or its main description. 

[0052] 

[Effect of the Invention] Even if a user does not start the function of user 



authentication intentionally, it can make it possible to be managed, since this 
invention started the function of user authentication when having accessed, and 
it judged whether the access request was performed to the network or system 
which needs user authentication and such an access request was performed, as 
mentioned above. Thereby, access to the target system etc. can also perform 
starting of an authentication function by one actuation by being wide opened 
from the troublesomeness of starting an authentication function specially, before 
performing the original use purpose, and a user can make a user's actuation 
procedure simple. According to this invention, the convenience of the user who 
performs user authentication can be raised from the above thing. 



DESCRIPTION OF DRAWINGS 
[Brief Description of the Drawings] 

[Drawing 1] It is the block diagram showing the example of a functional 
configuration of the 1st terminal by this operation gestalt. 

[Drawing 2] It is drawing showing the configuration of the whole network system 
which applied the user authentication system by this operation gestalt. 
fDrawing 3] It is the flow chart which shows actuation of the user authentication 



starting section with which the 1st terminal by this operation gestalt is equipped. 
rDra wing 4] It is drawing showing the configuration of the conventional whole 

network system. 

[Description of Notations] 

1 , 2, 3 Terminal (personal computer) 

4 Six Exclusive reader 

5 Seven IC card 

8 Router 

9 File Server 

10 Mail Server 

1 1 Personnel Affairs and Salary Server 

12 Accounting and Financial Server 

13 Personal Authentication Equipment 

21 Communications Department 

22 Authentication Processing Section 

23 Access Request Section 

24 User Authentication Starting Section 



